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IN THE CLAIMS: 

This listing of claims will replace all prior versions, and listings, of claims in the application: 
Listing of Claims: 

1 . (Withdrawn) A method for communicating a transaction between an originating 
computer and a destination computer, the method comprising the steps of 

processing transaction data from an application suite at the originating computer; 

generating standardized data transactions based on predefined definitions; 

sending the standardized transaction data from the originating computer to the 
destination computer; 

receiving the standardized transaction data by the destination computer; 

generating transaction data based on the attributes of the destination computer and 
storing the transaction data at the destination computer; and, 

processing the transaction data by a target application suite at the destination 
computer. 

2. (Withdrawn) The method for communicating a transaction as in claim 1, wherein 
the generating transaction data step comprises converting the transaction data from its original 
format to a standardized format. 

3. (Withdrawn) The method for communicating a transaction as in claim 2, wherein 
the generating transaction data step converts the data from the standardized format to a format 
readable by the target application suite. 

4. (Withdrawn) The method for communicating a transaction as in claim 1, the 
generating standardized data transactions comprising creating unique encryption keys for 
encoding and decoding transaction data. 
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5. (Withdrawn) A system for communicating a transaction between an originating 
computer, the originating computer comprising a computer usable medium having computer 
readable instruction code means stored therein, and a destination computer, the destination 
computer comprising a computer usable medium having computer readable instruction code 
means stored therein, the system comprising the steps of 

computer readable instruction code means for processing transaction data from an 
application suite at the originating computer; 

computer readable instruction code means for generating standardized data 
transactions based on predefined definitions; 

computer readable instruction code means for sending the standardized 
transaction data from the originating computer to the destination computer; 

computer readable instruction code means for receiving the standardized 
transaction data by the destination computer; 

computer readable instruction code means for generating transaction data based 
on the attributes of the destination computer and storing the transaction data at the 
destination computer; and, 

computer readable instruction code means for processing the transaction data by a 
target application suite at the destination computer. 

6. (Currently Amended) A method for exchanging data between an initiator and a 
responder, the steps comprising: 

sending a session request package from the initiator to the responde r to initiate a session ; 

generating a new first key pair by the responde r for the session , the first key pair 
comprising a new responder public key and a new responder private key; 

sending a session confirm from the responder to the initiator, the session confirm 
comprising the new responder public key; 

generating a new second key pair by the initiato r for the session , the second key pair 
comprising an new initiator public key and an new initiator private key; 
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sending a key request from the initiator to the responder, the key request comprising the 
new initiator public key and encoded using the new responder public key; 

confirming the initiator's key request has been encoded correctly by the responder; 
sending a key confirm from the responder to the initiator; 

confirming the responder' s key confirm has been encoded correctly by the initiator; 
sending a data package by the initiator to the responder; 
replying with a package confirm by the responder to the initiator; and, 
repeating the sending a data package step and replying step until the initiator sends an end 
request. 

7 (Original) The method for exchanging data between an initiator and a responder 
as in claim 6, wherein the session request package comprises the initiator's IP address and profile 
data. 

8. (Cancelled) 

9. (Previously Presented) The method for exchanging data between an initiator and a 
responder as in claim 6, wherein the session confirm comprises: 

the responder' s profile data. 

10. (Currently Amended) The method for exchanging data between an initiator and a 
responder as in claim 6, the key request comprises: 

the new initiator fT'sIl public sessien-key; 
the initiator's profile data. 

Claims 11-12 (Cancelled) 

13. (Original) The method for exchanging data between an initiator and a responder 
as in claim 6, wherein the confirming the initiator's key request step comprises: 
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decoding the key request; and, 

verifying the key request is properly formatted. 

14. (Original) The method for exchanging date between an initiator and a responder 
as in claim 6, wherein the confirming the responder' s key confirm step comprises: 

decoding the key confirm, and 

verifying the key confirm is properly formatted. 

15. (Original) The method for exchanging data between an initiator and a responder 
as in claim 6, wherein the sending a data package steps further comprises converting the data 
from its original format to a standardized format. 

16. (Original) The method for exchanging data between an initiator and a responder 
as in claim 15, wherein the replying step further comprises converting the data from the 
standardized format to a format used by the responder. 

17. (Original) The method for exchanging data between an initiator and a responder 
as in claim 15, wherein the standardized format is EDI. 

18. (Currently Amended) A system for exchanging data between an initiator 
computer and a responder computer, the initiator computer comprising a computer usable 
medium having computer readable instruction code means stored therein, and the responder 
computer comprising a computer usable medium having computer readable instruction code 
means stored therein, the system comprising the steps of: 

computer readable instruction code means for sending a session request package 
from the initiator to the responde r to initiate a session ; 

computer readable instruction code means for generating a new first key pair by 
the responder for the session, the first key pair comprising a new responder public key 
and a new responder private key; 
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computer readable instruction code means for sending a session confirm from the 
responder to the initiato r, the session confirm comprising the new responder public key ; 

computer readable instruction code means for generating a new second key pair by 
the initiator for the session, the second key pair comprising a new initiator public key 
anda new initiator private key; 

computer readable instruction code means for sending a key request from the 
initiator to the responde r, the key request comprising the new initiator public key and 
encoded using the new responder public key ; 

computer readable instruction code means for confirming the initiator's key 
request has been encoded correctly by the responder; 

computer readable instruction code means for sending a key confirm from the 
responder to the initiator; 

computer readable instruction code means for confirming the responder' s key 
confirm has been encoded correctly by the initiator; 

computer readable instruction code means for confirming the responder' s key 
confirm has been encoded correctly by the initiator; 

computer readable instruction code means for sending a data package by the 
initiator to the responder; 

computer readable instruction code means for replying with a package confirm by 
the responder to the initiator; and, 

repeating the sending a data package step and replying step until the initiator 
sends an end request. 

19. (Original) A system for exchanging data between an initiator computer and a 
responder computer as in claim 18, wherein the session request package comprises the initiator's 
IP address and profile data. 

20. (Cancelled) 
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21. (Currently Amended) A system for exchanging data between an initiator 
computer and a responder computer as in claim [[20]]I8, wherein the session confirm 
comprises[[:]] 

th e sessi o n key pair; 
the respo n der' s public s e ss ion key ; a nd; 
the responder' s profile data. 

22. (Currently Amended) A system for exchanging data between an initiator 
computer and a responder computer as in claim 18, the key request comprises[[:]] 

t he initiator's p u b li c sessi o n k ey ; m d, 
the initiator's profile data. 

23. (Cancelled) 

24. (Currently Amended) The method for exchanging data between an initiator and a 
responder as in claim 18, wherein the key request is encoded with the new responder[['s]l public 
session key. 

25. (Original) A system for exchanging data between an initiator computer and a 
responder computer as in claim 18, wherein the system further comprising: 

computer readable instruction code means for decoding the key request; and, 
computer readable instruction code means for verifying the key request is properly 
formatted. 

26. (Original) A system for exchanging data between an initiator computer and a 
responder computer as in claim 18, wherein the system further comprising: 

computer readable instruction code means for decoding the key confirm; and, 
computer readable instruction code means for verifying the key confirm is 
properly formatted. 
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Claims 27-42 (Cancelled) 

43. (Currently Amended) A method for exchanging data between an initiator and a 
responder, the responder steps comprising: 

receiving a session request package to initiate a new session ; 

generating a new responder session key pair for the session comprising a new 
responder public session key; 

sending a session confirm , the session confirm including the new responder public 
session key ; 

receiving a key request containing a new initiator public session key for the 
session ; 

confirming the initiator's key request has been encoded correctl y with the new 
responder public session key ; 
sending a key confirm; 
receiving a data package; 
replying with a package confirm; and, 

repeating the receiving a data package step and replying step until receiving an 
end session request. 

44. (Original) The method for exchanging data between an initiator and a responder 
as in claim 43, wherein the session request package comprises the initiator's IP address and 
profile data. 

45. (Cancelled) 

46. (Currently Amended) The method for exchanging data between an initiator and a 
responder as in claim 43, wherein the session confirm comprises^ 

the sess ion key pair; 
the public session key; 
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a profile data. 

47. (Currently Amended) The method for exchanging data between an initiator and a 
responder as in claim 43, the key request comprisesf 

the initiator's pub lic session key; and^ 
the initiator's profile data. 

48. (Cancelled) 

49. (Currently Amended) The method for exchanging data between an initiator and a 
responder as in claim [[48]] 43, wherein the key request is encoded with the new responder public 
session key. 

50. (Original) The method for exchanging data between an initiator and a responder 
as in claim 43, wherein the confirming step comprises: 

decoding the key request; and, 

verifying the key request is properly formatted. 

5 1 . (Currently Amended) A computer usable medium having computer readable 
instruction code means stored therein for enabling a computer to exchange transactions with a 
separate computer, comprising: 

computer readable instruction code means for causing the computer to receive a 
session request package to initiate a new session from an initiator; 

computer readable instruction code means for generating a new responder session 
key pair for the session comprising a new responder public session key; 

computer readable instruction code means for causing the computer to send a 
session confirm including the new responder public session key ; 

computer readable instruction code means for causing the computer to receive a 
key request containing a new initiator public session key for the session ; 
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computer readable instruction code means for causing the computer to confirm the 
key request has been encoded correctly; 

computer readable instruction code means for causing the computer to send a key 
confirm; 

computer readable instruction code means for causing the computer to receive a 
data package; 

computer readable instruction code means for causing the computer to reply with 
a package confirm; and, 

computer readable instruction code means for causing the computer to receiving 
data packages and reply with package confirms until the computer receives an end session 
request. 

52. (Original) The computer useable medium as in claim 5 1 , wherein the session 
request package comprises the initiator's IP address and profile data. 

53. (Cancelled) 

54. (Currently Amended) The computer useable medium as in claim [[53]]51_, 
wherein the session confirm comprises- 

the se s sion key pair; 
the public sessi on key; 
a profile data. 

55. (Currently Amended) The computer useable medium as in claim 54, the key 
request comprisesT 

t h e initiator's public ses s i on k ey ; 
the initiator's profile data. 

56. (Cancelled) 
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57. (Currently Amended) The computer useable medium as in claim [[56]]51, 
wherein the key request is encoded with the new responder p ublic session key. 

58. (Original) The computer useable medium as in claim 5 1, wherein the confirming 
step comprises: 

decoding the key request; and, 

verifying the key request is properly formatted. 

59. (Cancelled) 

60. (Withdrawn) The system for exchanging data as in claim 59, wherein the first 
network comprises a plurality of segments. 

61 . (Withdrawn) The system for exchanging data as in claim 60, wherein at least one 
segment of the first network is selected from the group consisting of wireless, fiber optic, 
infrared, a hand held computer, and a voice recognition device. 

62. (Withdrawn) The system for exchanging data as in claim 59, wherein the second 
network comprises a plurality of segments. 

63. (Withdrawn) The system for exchanging data as in claim 62, wherein at least one 
segment of the second network is selected from the group consisting of wireless, fiber optic, 
infrared, a hand held computer, and a voice recognition device. 

64. (Withdrawn) The system for exchanging data as in claim 63, wherein the initiator 
further comprises a web browser. 

65. (Withdrawn) A method for exchanging data, comprising; 
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a) an initiator who initiates the transaction, the transaction including data, 
selected from the group consisting of an application server, a third party server, a web 
host server, and a commerce server; 

b) a responder which receives the transaction selected from the group 
consisting of the application server, the third party server, the web host server, and the 
commerce server; 

c) a point to point secure transfer protocol using high level encryption for 
sending and receiving the transaction, the protocol comprising; 

1) computer readable instruction code means for establishing an active 
listener via an event wait state; 

2) computer readable instruction code means for accessing the trading 
partner profile table and determining the identity of the initiator, what transactions 
the initiator and responder have mutually agreed to allow, determine a location 
and format of data for the transaction and determine allowable values; 

3) computer readable instruction code means for generating a security 
error and terminating the code if the initiator is not authorized; 

4) computer readable instruction code means for writing activity to an 
activity log; 

5) computer readable instruction code means for determining and 
processing an event state, the event state selected from the group consisting of 
idle, session request, session confirm, key request, key confirm, data package, 
next data package, package confirm, end request, and end confirm; 

6) establishing a business conversation between trading partners, the 
business conversation comprised of specific time or event driven transaction sets; 

7) computer readable instruction code means for building a header 
and cargo appropriate for the event state; 

8) computer readable instruction code means for generating a unique 
encryption key pair for each transmission; 



-Page 12 of 20- 



Appl. No. 09/836,894 

Reply to Office Action of August 4, 2005 

Amendment dated December 5, 2005 

9) computer readable instructions for compressing and encrypting the 
data using the unique encryption key pair; 

10) computer readable instruction means for sending the data to the 
responder that prevents the data from being stored on a server hard drive while the 
data is in transit between the initiator and responder; 

1 1) computer readable instruction code means for receiving, decrypting 
and decompressing the data. 

66. (Withdrawn) The method for exchanging data as in claim 65, wherein the data 
comprises at least one of the group consisting of text., binary objects, image, a sound recording, a 
data stream, EDI, XML, and EDIFACT. 

67. (Withdrawn) The method for exchanging data as in claim 65, wherein a unique 
signature key generated on the hosting system is derived from a passphrase generated from user 
input and unique system identifiers facilitating non-repudiation. 

68. (Withdrawn) The method for exchanging data as in claim 65, wherein sharing of 
public keys is directly between trading partners only and used during a single session only. 

69. (Withdrawn) The method for exchanging data as in claim 65, wherein the 
initiator's and responder' s public keys are uniquely created by the insertion of string values into 
randomly chosen positions. 

70. (Withdrawn) The method for exchanging data as in claim 65, wherein bi- 
directional verification of sender and recipient identities is accomplished prior to any exchange 
of data. 



-Page 13 of 20- 



Appl. No. 09/836,894 

Reply to Office Action of August 4, 2005 

Amendment dated December 5, 2005 

71 . (Withdrawn) The method for exchanging data as in claim 65 5 wherein separate 
exchanges of public signature keys, used for trading partner validation, and public exchange 
keys, used for encoding/decoding of data, are facilitated. 

72. (Withdrawn) The method for exchanging data as in claim 65, wherein the 
initiator maintains full control of data provided to validated partners. 

73. (Withdrawn) The method for exchanging data as in claim 65, wherein an entire 
data package is encoded prior to transmission. 

74. (Withdrawn) The method for exchanging data as in claim 65, wherein data 
receipt by the intended recipient is verified. 

75. (Withdrawn) A queue based method for initiating and managing a business 
conversation, wherein an inbound transmission originates from the group consisting of a web 
host and a third party server, the business conversation comprising at least one transaction and 
comprising a commerce server, the commerce server comprising a trading partner profile table, a 
transaction engine queue, a reply requirements queue, a transaction engine outbound queue, a 
SDS transaction queue, and a transport protocol outbound queue, the commerce server being 
communicatively coupled by a first network to at least one of a web host server and a third party 
server, and the commerce server being communicatively coupled by a second network to an 
application server, the steps comprising: 

a) receiving an inbound request, determining the initiator and responder, 
decode and decompress the request, determine the output destination and adding 
to the transaction engine queue; 

b) parsing the inbound transmission into at least one transaction, authorizing 
the initiator, preparing a data structure for each transaction and returning the 
transaction to the transaction engine queue; 
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c) building and managing the business conversation by utilizing the business 
transaction map and forwarding the transactions to the appropriate queue selected 
from the reply requirements queue, the transport protocol outbound queue and the 
SDS transaction queue; 

76. (Withdrawn) The queue based method for initiating a business conversation 
according to claim 75 wherein the inbound transmission is received from the group consisting of 
the web host server and third party server communicatively coupled to the first network. 

77. (Withdrawn) The queue based method for initiating a business conversation 
according to claim 75 wherein the final destination of the transaction is the application server. 

78. (Withdrawn) The queue based method for initiating a business conversation 
according to claim 75 wherein step (c) further comprises building and managing at least one 
future conversational transaction and forwarding the future transaction to the reply requirements 
queue. 

79. (Withdrawn) The queue based method for initiating a business conversation 
according to claim 75 wherein step (c) further comprises sending an outbound transaction to the 
transport protocol outbound queue. 

80. (Withdrawn) The queue based method for initiating a business conversation 
according to claim 75 wherein step (c) further comprises sending the transaction from the SDS 
transaction queue to its final destination, the application server. 

8 1 . (Withdrawn) A queue based method for initiating and managing a business 
conversation, wherein an outbound transmission originates from an applications server, the 
business conversation comprising at least one transaction and comprising a commerce server, the 
commerce server comprising a trading partner profile table, a transaction engine queue, a reply 
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requirements queue, a transaction engine outbound queue, a SDS transaction queue, and a 
transport protocol outbound queue, the commerce server being communicatively coupled by a 
first network to at least one of a web host server and a third party server, and the commerce 
server being communicatively coupled by a second network to an application server, the steps 
comprising: 

a) receiving an outbound transaction, reading, parsing and formatting of the 
transaction and adding to the transaction engine outbound queue; 

b) parsing of transaction to the recipients pre-determined format based on the 
overall database structure map; 

c) determining the recipient of at least one transaction, building the outbound 
transaction and forwarding to the transaction engine queue; 

d) building and managing of at least one future conversational transaction 
and forwarding the future transaction to the reply requirements queue; 

e) compressing, logging and encoding the outbound transaction; 

f) transmission of the transaction to it's final destination. 

82. (Withdrawn) The queue based method for sending an outbound transmission of a 
business conversation according to claim 81 wherein the final destination of the outbound 
transmission is selected from the group of the web host server and third party server on the first 
network. 

83. (Previously Presented) A method for exchanging data according to claim 6, 
the confirming the responder's key confirm comprises verifying the responder's key confirm was 
encoded with the initiator's public key. 

84. (Previously Presented) A method for exchanging data according to claim 6, 
further comprising: 

the sending a data package by the initiator comprises encoding the data package with the 
responder public key; and 
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the replying with a package confirm further comprises encoding the package confirm with 
the initiator public key. 

85. (Previously Presented) A method for exchanging data according to claim 6, 
further comprising: 

determining by the responder when the session request is received whether a queue limit 
counter has been exceeded. 

86. (Previously Presented) A method for exchanging data according to claim 
85, further comprising: 

aborting the method for exchanging data responsive to exceeding the queue limit counter; 

and 

writing an error log entry responsive to exceeding the queue limit counter. 

87. (New) A method for exchanging date according to claim 6, further comprising: 
sending a message from the initiator to responder encoded with the new responder public 

key; and 

sending a message from the responder to the initiator encoded with the new initiator 
public key. 
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